At Qi, your privacy and the security of your personal information are our top priorities. We are committed to maintaining your trust by handling your data with the utmost care, transparency, and responsibility. This Privacy Policy outlines how we collect, use, and safeguard your information when you use our mobile application.

Our approach to privacy is grounded in the following core pillars:

Transparency and Choice

We believe you should always know what data we collect and why. We provide clear explanations and user-friendly settings, so you can make informed choices about how your information is used.

Data Minimization

We only collect data that is essential to delivering and improving your Qi experience. We do not request or retain information without a legitimate purpose directly tied to your interaction with the app.

Security by Design

From day one, our systems and practices are designed to protect your data. We employ industry-standard encryption, secure authentication protocols, and rigorous access controls to prevent unauthorized access or misuse.

By using Qi, you entrust us with your personal information, and we take that responsibility seriously. This policy details how we honor that trust.

Qi Corporation (“Qi,” “we,” “us,” or “our”) respects the privacy of individuals who use our application, website, and associated services (collectively, the “Services”). This Privacy Policy describes the types of information we collect, how we use it, how we protect it, the rights and choices available to you, and how to contact us. This Privacy Policy applies to your use of the Services and governs how we collect, use, disclose, and retain your personal information. Please read this policy carefully.

Scope of This Policy

This Privacy Policy applies to information that Qi collects through:

• Our mobile application and website

• Direct interactions (e.g., account registration, customer support)

• User-generated content and community features

• Communications between users and Qi

This policy does not apply to third-party websites, apps, or services that may be linked through the Services. We encourage you to review the privacy policies of any third-party services before interacting with them.

Information We Collect

We collect the following categories of information, either directly from you, automatically, or from third-party integrations:

Information You Provide or Authorize. Personal information you may provide to us through the Service or authorize through a third-party integration, such as Google Authentication:

• Contact data, such as your name, email address

• Identifier data, such as account ID

• Profile data, such as self-declared health purposes, birth date, ethnicity

• User-generated data, such as uploaded photos, commentary on saved solutions, user inputted posts, user generated messages to other users

• Communication data, such as conversations between you and Qi through the Services in app, through email, or other marketing avenues

• Other data not specifically listed here, which we will use as described in this Privacy Policy or as otherwise disclosed at the time of collection.

Information Collected Automatically. We, our service providers, and our business partners may automatically log information about you, your computer or mobile device, and your interaction over time with the Service, our communications and other online services, such as:

• Device and technical data, such as browser type, operating system, IP address, mobile device ID

• Usage data, such as feature usage, session metrics, referral source, clicks

• Diagnostic data, such as performance logs, crash reports

• Communication interaction data, such as your interactions with our emails, texts or other communications (e.g., whether you open and/or forward emails).

Sources of Personal Information

We may collect Personal Information about you from the following categories of sources:

• Directly from you through self-reported information, i.e. directly from you through your interactions with us, including without limitation when you use our Services (e.g. creating an account with us) or otherwise contact us via chat, email, phone, or text.

• Through cookies and other tracking technologies, as discussed in more detail in Cookies and Other Tracking Technologies.

• From other third parties, including our third party service providers, business and marketing partners, affiliates, analytics providers, ad network providers, ad agencies, and advertisers.

• From third parties that you choose (such as account authenticators).

• From government agencies or public records.

• From social media and other content platforms.

You are not required to provide any personal data to access certain parts of the Services, but certain features may be unavailable if you choose not to.

Cookies and Other Tracking Technologies

We use cookies and similar tracking technologies and analytics services to track activity on the Site and Services.

Cookies

Cookies are files with a small amount of data which may include unique identifier. Cookies are sent to your browser from a website and stored on your device. Other tracking technologies we may use include web beacons to track information and analyze the Services. Beacons (also known as pixel tags, clear GIFs) are small objects that are embedded in an image on a website; they can transmit information directly to Qi, or to another person or entity of our designation. For the purposes of this Privacy Policy, cookies, beacons, and other such tracking technologies shall, collectively, be embraced by the term “Cookies.” You can instruct your browser to refuse certain Cookies or to indicate when a Cookie is being sent. However, if you do not accept certain Cookies, you may not be able to use some portions of our Service.

Analytics

We may use Google Analytics or other service providers for analytics services. These analytics services may use Cookies and other tracking technologies to help us analyze how users use the Services. Information generated by these services (e.g., your IP address and other usage information) may be transmitted to and stored by Google Analytics and other service providers on servers in the U.S. (or elsewhere) and these service providers may use this information for purposes such as evaluating your use of the Service, compiling statistic reports on the Service’s activity, and providing other services relating to Service activity and other Internet usage. You may exercise choices regarding the use of Cookies from Google Analytics by going to https://tools.google.com/dlpage/gaoptout or downloading the Google Analytics Opt-out Browser Add-on.

Use of Personal Information

We may use your personal information for the following purposes or as otherwise described at the time of collection:

Service delivery and operations. We may use your personal information to:

• provide, operate and improve the Service and our business;

• personalizing the service, including remembering the devices from which you have previously logged in and remembering your selections and preferences as you navigate the Service;

• establish and maintain your user profile on the Service;

• facilitate your invitations to friends who you want to invite to join the Service;

• facilitate social features of the Service, such as by identifying and suggesting connections with other users of the Service and providing chat or messaging functionality

• enable security features of the Service, such as by sending you security codes via email or SMS, and remembering devices from which you have previously logged in;

• communicate with you about the Service, including by sending Service-related announcements, updates, security alerts, and support and administrative messages;

• communicate with you about events or contests in which you participate;

• understand your needs and interests, and personalize your experience with the Service and our communications; and

• provide support for the Service, and respond to your requests, questions and feedback.

Research and development. We may use your personal information for research and development purposes, including to analyze and improve the Service and our business and to develop new products and services.

Marketing and advertising. We, our service providers and our third-party advertising partners may collect and use your personal information for marketing and advertising purposes:

Direct marketing. We may send you direct marketing communications and may personalize these messages based on your needs and interests. You may opt-out of our marketing communications as described in the Opt-out of marketing section below.

Interest-based advertising. Our third-party advertising partners may use cookies and similar technologies to collect information about your interaction (including the data described in the automatic data collection section above) with the Service, our communications and other online services over time, and use that information to serve online ads that they think will interest you. This is called interest-based advertising. We may also share information about our users with these companies to facilitate interest-based advertising to those or similar users on other online platforms.

Service improvement and analytics. We may use your personal information to analyze your usage of the Service, improve the Service, improve the rest of our business, help us understand user activity on the Service, including which pages are most and least visited and how visitors move around the Service, as well as user interactions with our emails, and to develop new products and services.

Compliance and protection. We may use your personal information to:

• comply with applicable laws, lawful requests, and legal process, such as to respond to subpoenas, investigations or requests from government authorities;

• protect our, your or others’ rights, privacy, safety or property (including by making and defending legal claims);

• audit our internal processes for compliance with legal and contractual requirements or our internal policies;

• enforce the terms and conditions that govern the Service; and

• prevent, identify, investigate and deter fraudulent, harmful, unauthorized, unethical or illegal activity, including cyberattacks and identity theft.

With your consent. In some cases, we may specifically ask for your consent to collect, use or share your personal information, such as when required by law.

To create aggregated, de-identified and/or anonymized data. We may create aggregated, de-identified and/or anonymized data from your personal information and other individuals whose personal information we collect. We make personal information into de-identified and/or anonymized data by removing information that makes the data identifiable to you. We may use this aggregated, de-identified and/or anonymized data and share it with third parties for our lawful business purposes, including to analyze and improve the Service and promote our business.

Data sharing in the context of corporate events, we may share certain personal information in the context of actual or prospective corporate events. For more information, see How we share your personal information.

Cookies and similar technologies. In addition to the other uses included in this section, we may use the Cookies and similar technologies described above for the following purposes:

• Technical operation. To allow the technical operation of the Service, such as by remembering your selections and preferences as you navigate the site, and whether you are logged in when you visit password protected areas of the Service.

• Functionality. To enhance the performance and functionality of our services.

• Advertising. To help our third-party advertising partners collect information about how you use the Service and other online services over time, which they use to show you ads on other online services they believe will interest you and measure how the ads perform.

• Analytics. To help us understand user activity on the Service, including which pages are most and least visited and how visitors move around the Service, as well as user interactions with our emails. For example, we may use Google Analytics for this purpose. If we use Google Analytics, you can learn more about Google Analytics and how to prevent the use of Google Analytics relating to your use of our sites here: https://tools.google.com/dlpage/gaoptout?hl=en.

We will not use sensitive health-related data for advertising purposes. We do not perform automated decision-making that produces legal or similarly significant effects without your explicit consent.

How we Share your Personal Information

We may share your personal information with the following parties and as otherwise described in this Privacy Policy, in other applicable notices, or at the time of collection.

Service providers. Third parties that provide services on our behalf or help us operate the Service or our business (such as hosting, information technology, artificial intelligence providers, customer support, online chat functionality providers, email delivery, marketing, consumer research and website analytics).

Advertising partners. Third-party advertising companies for the interest-based advertising purposes described above. We do not necessarily control how advertising partners may use your information.

Partners. We may sometimes share your personal information with partners or enable partners to collect information directly via our Service.

Business and marketing partners. Third parties with whom we co-sponsor events or promotions, with whom we jointly offer products or services, or whose products or services may be of interest to you.

Linked third-party services. If you log into the Service with, or otherwise link your Service account to, a social media or other third-party service, we may share your personal information with that third-party service. The third party’s use of the shared information will be governed by its privacy policy and the settings associated with your account with the third-party service.

Professional advisors. Professional advisors, such as lawyers, auditors, bankers and insurers, where necessary in the course of the professional services that they render to us.

Authorities and others. Law enforcement, government authorities, and private parties, as we believe in good faith to be necessary or appropriate for the Compliance and protection purposes described above.

Business transferees. We may disclose personal information in the context of actual or prospective business transactions (e.g., investments in or financings of Qi, or the sale, transfer or merger of all or part of our business, assets or shares), for example, we may need to share certain personal information with prospective counterparties and their advisers. We may also disclose your personal information to an acquirer, successor, or assignee of Qi as part of any merger, acquisition, sale of assets, or similar transaction, and/or in the event of an insolvency, bankruptcy, or receivership in which personal information is transferred to one or more third parties as one of our business assets.

Data Security

We employ a number of technical and organizational safeguards designed to protect the personal information we collect. However, security risk is inherent in all internet and information technologies and we cannot guarantee the security of your personal information.

Data Retention

We generally retain personal information to fulfill the purposes for which we collected it, including for the purposes of satisfying any legal, accounting, or reporting requirements, to establish or defend legal claims, or for fraud prevention purposes. To determine the appropriate retention period for personal information, we may consider factors such as the amount, nature, and sensitivity of the personal information, the potential risk of harm from unauthorized use or disclosure of your personal information, the purposes for which we process your personal information and whether we can achieve those purposes through other means, and the applicable legal requirements.

International Transfers

We are headquartered in the United States and may use service providers that operate in other countries. Your personal information may be transferred to the United States or other locations where privacy laws may not be as protective as those in your state, province, or country.

Children’s Privacy

The Service is not intended for use by anyone under 18 years of age. If you are a parent or guardian of a child from whom you believe we have collected personal information in a manner prohibited by law, please contact us. If we learn that we have collected personal information through the Service from a child without the consent of the child’s parent or guardian as required by law, we will comply with applicable legal requirements to delete the information.

Your Rights and Choices

In this section, we describe the rights and choices available to all users.

Access or update your information. If you have registered for an account with us through the Service, you may review and update certain account information by logging into the account.

Privacy settings. We may make available certain privacy settings on the Service.

Opt-out of communications. You may opt-out of marketing-related emails by following the opt-out or unsubscribe instructions at the bottom of the email, or by contacting us. Please note that if you choose to opt-out of marketing-related emails, you may continue to receive service-related and other non-marketing emails.

Cookies. Most browsers let you remove or reject cookies. To do this, follow the instructions in your browser settings. Many browsers accept cookies by default until you change your settings. Please note that if you set your browser to disable cookies, the Service may not work properly. For more information about cookies, including how to see what cookies have been set on your browser and how to manage and delete them, visit www.allaboutcookies.org. You can also configure your device to prevent images from loading to prevent web beacons from functioning.

Blocking images/clear gifs: Most browsers and devices allow you to configure your device to prevent images from loading. To do this, follow the instructions in your particular browser or device settings.

Advertising choices. You may be able to limit use of your information for interest-based advertising through the following settings/options/tools:

• Browser settings. Changing your internet web browser settings to block third-party cookies.

• Privacy browsers/plug-ins. Using privacy browsers and/or ad-blocking browser plug-ins that let you block tracking technologies.

• Platform settings. Google and Facebook offer opt-out features that let you opt-out of use of your information for interest-based advertising. You may be able to exercise that option at the following websites:

• Google: https://adssettings.google.com/

• Facebook: https://www.facebook.com/about/ads

• Ad industry tools. Opting out of interest-based ads from companies that participate in the following industry opt-out programs:

• Network Advertising Initiative: http://www.networkadvertising.org/managing/opt_out.asp

• Digital Advertising Alliance: optout.aboutads.info.

• AppChoices mobile app, available at https://www.youradchoices.com/appchoices, which will allow you to opt-out of interest-based ads in mobile apps served by participating members of the Digital Advertising Alliance.

• Mobile settings. Using your mobile device settings to limit use of the advertising ID associated with your mobile device for interest-based advertising purposes.

You will need to apply these opt-out settings on each device and browser from which you wish to limit the use of your information for interest-based advertising purposes.

We cannot offer any assurances as to whether the companies we work with participate in the opt-out programs described above.

Do Not Track. Some Internet browsers may be configured to send “Do Not Track” signals to the online services that you visit. We currently do not respond to “Do Not Track” signals. To find out more about “Do Not Track,” please visit http://www.allaboutdnt.com.

Declining to provide information. We need to collect personal information to provide certain services. If you do not provide the information we identify as required or mandatory, we may not be able to provide those services.

Linked third-party platforms. If you choose to connect to the Service through your social media account or other third-party platform, you may be able to use your settings in your account with that platform to limit the information we receive from it. If you revoke our ability to access information from a third-party platform, that choice will not apply to information that we have already received from that third party.

If you are under these jurisdictions, you may also have access to the following additional rights:

Under CCPA/CPRA:

• Deletion of personal information

• Opt out of sale or sharing (we do not sell data)

• Limited use of sensitive personal information

• Non-discrimination for exercising your rights

Under MHMD or other U.S. State Privacy Laws:

• Understand health data uses and disclosures

• Review audit trails of shared data

• Control and revoke consent for secondary use

You may exercise any of these rights by emailing us at support@findqi.com. We may require verification before processing certain requests.

Changes to This Privacy Policy

We may revise this Privacy Policy from time to time to reflect changes in law, technology, or our practices. Material updates will be communicated via in-app notices or direct email. The “Effective Date” above will always indicate the latest version. In all cases, your use of the Service after the effective date of any modified Privacy Policy indicates your acknowledging that the modified Privacy Policy applies to your interactions with the Service and our business.

Contact Us

If you have any questions or concerns about this Privacy Policy, or wish to exercise your rights, you may contact us at support@findqi.com